Overview

overview

10

Static

static

87ef4e5e5b...a4.exe

windows7-x64

10

87ef4e5e5b...a4.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    87ef4e5e5b0636d7c6ad608b0803d62056efc7e757652754b6d0808263a16ea4

  • Size

    100KB

  • Sample

    221202-1aywrafa82

  • MD5

    dc3499f9821026a0edf0728fdb41135c

  • SHA1

    c662bc65d4bb253530c08f60f37964f86d7cc8fc

  • SHA256

    87ef4e5e5b0636d7c6ad608b0803d62056efc7e757652754b6d0808263a16ea4

  • SHA512

    4cc0c7d7fe3c5a53a2c56451f0fdc811ae7b14a5c141506f0193cf45f70a372ec6b6609ab9255d3f712301eac77714da7d20ce684bcea3a818315e4f1cd2dfd4

  • SSDEEP

    1536:/MtGM82NTzw0g5MGAc4ohrPXo+73Rez8b0SysNIjP:4w0NurPX7CsCP

Score
10/10
evasionpersistence

Malware Config

Targets

    • Target

      87ef4e5e5b0636d7c6ad608b0803d62056efc7e757652754b6d0808263a16ea4

    • Size

      100KB

    • MD5

      dc3499f9821026a0edf0728fdb41135c

    • SHA1

      c662bc65d4bb253530c08f60f37964f86d7cc8fc

    • SHA256

      87ef4e5e5b0636d7c6ad608b0803d62056efc7e757652754b6d0808263a16ea4

    • SHA512

      4cc0c7d7fe3c5a53a2c56451f0fdc811ae7b14a5c141506f0193cf45f70a372ec6b6609ab9255d3f712301eac77714da7d20ce684bcea3a818315e4f1cd2dfd4

    • SSDEEP

      1536:/MtGM82NTzw0g5MGAc4ohrPXo+73Rez8b0SysNIjP:4w0NurPX7CsCP

    Score
    10/10
    evasionpersistence

    • Modifies visiblity of hidden/system files in Explorer

      evasion

    • Executes dropped EXE

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Loads dropped DLL

    • Adds Run key to start application

      persistence
    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks